{ "fix": "ALAS2023-2026-1882", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1882", "summary": "ALAS2023-2026-1882, released June 22, 2026, fixes 166 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 18 packages", "released": "2026-06-22T09:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-64047, rated Critical", "supported": true, "cveCount": 166, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.05372, "maxCvss": 9.8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1882.html", "appliesTo": [ { "product": "bpftool", "productUrl": "https://patchblox.com/security/product/linux/bpftool", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "bpftool-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel", "productUrl": "https://patchblox.com/security/product/linux/kernel", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel-headers", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.1.175-219.357", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.175-219.357", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "perf", "productUrl": "https://patchblox.com/security/product/linux/perf", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "python3-perf", "productUrl": "https://patchblox.com/security/product/linux/python3-perf", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "python3-perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-64046", "url": "https://patchblox.com/security/cve/CVE-2026-64046", "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64047", "url": "https://patchblox.com/security/cve/CVE-2026-64047", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43071", "url": "https://patchblox.com/security/cve/CVE-2026-43071", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dcache: Limit the minimal number of bucket to tw...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00459, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43117", "url": "https://patchblox.com/security/cve/CVE-2026-43117", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00458, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52993", "url": "https://patchblox.com/security/cve/CVE-2026-52993", "title": "tipc: fix double-free in tipc_buf_append()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00404, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52955", "url": "https://patchblox.com/security/cve/CVE-2026-52955", "title": "kernel-uek64k-core: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.0038, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53002", "url": "https://patchblox.com/security/cve/CVE-2026-53002", "title": "netfilter: conntrack: remove sprintf usage", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00368, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53075", "url": "https://patchblox.com/security/cve/CVE-2026-53075", "title": "ppp: require CAP_NET_ADMIN in target netns for unattached ioctls", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00273, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64106", "url": "https://patchblox.com/security/cve/CVE-2026-64106", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with o...", "priority": "Urgent", "severity": "critical", "cvss": 9, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53036", "url": "https://patchblox.com/security/cve/CVE-2026-53036", "title": "bpf, arm64: Fix off-by-one in check_imm signed range check", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53077", "url": "https://patchblox.com/security/cve/CVE-2026-53077", "title": "net/rds: Restrict use of RDS/IB to the initial network namespace", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53062", "url": "https://patchblox.com/security/cve/CVE-2026-53062", "title": "dm cache policy smq: fix missing locks in invalidating cache blocks", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43499", "url": "https://patchblox.com/security/cve/CVE-2026-43499", "title": "rtmutex: Use waiter::task instead of current in remove_waiter()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.05372, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46242", "url": "https://patchblox.com/security/cve/CVE-2026-46242", "title": "kpatch-patch-5_14_0-687_10_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.04576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52958", "url": "https://patchblox.com/security/cve/CVE-2026-52958", "title": "libceph: Fix potential out-of-bounds access in osdmap_decode()", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00735, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53003", "url": "https://patchblox.com/security/cve/CVE-2026-53003", "title": "pppoe: drop PFC frames", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43493", "url": "https://patchblox.com/security/cve/CVE-2026-43493", "title": "crypto: pcrypt - Fix handling of MAY_BACKLOG requests", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00681, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52986", "url": "https://patchblox.com/security/cve/CVE-2026-52986", "title": "netfilter: nf_conntrack_sip: don\u0027t use simple_strtoul", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00634, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43083", "url": "https://patchblox.com/security/cve/CVE-2026-43083", "title": "net: ioam6: fix OOB and missing lock", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.006, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52999", "url": "https://patchblox.com/security/cve/CVE-2026-52999", "title": "netfilter: nfnetlink_osf: fix out-of-bounds read on option matching", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00591, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52998", "url": "https://patchblox.com/security/cve/CVE-2026-52998", "title": "netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00579, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46102", "url": "https://patchblox.com/security/cve/CVE-2026-46102", "title": "net: strparser: fix skb_head leak in strp_abort_strp()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00564, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52981", "url": "https://patchblox.com/security/cve/CVE-2026-52981", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: neigh: let neigh_xmit take skb ownership neigh_...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00532, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64113", "url": "https://patchblox.com/security/cve/CVE-2026-64113", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00527, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46119", "url": "https://patchblox.com/security/cve/CVE-2026-46119", "title": "libceph: Fix slab-out-of-bounds access in auth message processing", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46185", "url": "https://patchblox.com/security/cve/CVE-2026-46185", "title": "smb/client: fix out-of-bounds read in symlink_data()", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52954", "url": "https://patchblox.com/security/cve/CVE-2026-52954", "title": "libceph: handle rbtree insertion error in decode_choose_args()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52957", "url": "https://patchblox.com/security/cve/CVE-2026-52957", "title": "libceph: Fix potential null-ptr-deref in decode_choose_args()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46037", "url": "https://patchblox.com/security/cve/CVE-2026-46037", "title": "ipv4: icmp: validate reply type before using icmp_pointers", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52974", "url": "https://patchblox.com/security/cve/CVE-2026-52974", "title": "net: tls: fix strparser anchor skb leak on offload RX setup failure", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46024", "url": "https://patchblox.com/security/cve/CVE-2026-46024", "title": "libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31685", "url": "https://patchblox.com/security/cve/CVE-2026-31685", "title": "netfilter: ip6t_eui64: reject invalid MAC header for all packets", "priority": "High", "severity": "Moderate", "cvss": 9.4, "epss": 0.00485, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46124", "url": "https://patchblox.com/security/cve/CVE-2026-46124", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: isofs: validate block number from NFS file handl...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00476, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46306", "url": "https://patchblox.com/security/cve/CVE-2026-46306", "title": "flow_dissector: do not dissect PPPoE PFC frames", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00449, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45843", "url": "https://patchblox.com/security/cve/CVE-2026-45843", "title": "slip: bound decode() reads against the compressed packet length", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00398, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53006", "url": "https://patchblox.com/security/cve/CVE-2026-53006", "title": "ipv6: fix possible UAF in icmpv6_rcv()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00394, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52967", "url": "https://patchblox.com/security/cve/CVE-2026-52967", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb/client: fix possible infinite loop and oob r...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00393, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31613", "url": "https://patchblox.com/security/cve/CVE-2026-31613", "title": "smb: client: fix OOB reads parsing symlink error response", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53069", "url": "https://patchblox.com/security/cve/CVE-2026-53069", "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.5, "epss": 0.0038, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43114", "url": "https://patchblox.com/security/cve/CVE-2026-43114", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: k...", "priority": "High", "severity": "Important", "cvss": 9.4, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43112", "url": "https://patchblox.com/security/cve/CVE-2026-43112", "title": "kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00352, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31708", "url": "https://patchblox.com/security/cve/CVE-2026-31708", "title": "smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00352, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43502", "url": "https://patchblox.com/security/cve/CVE-2026-43502", "title": "net/rds: handle zerocopy send cleanup before the message is queued", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00324, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43350", "url": "https://patchblox.com/security/cve/CVE-2026-43350", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: require a full NFS mode SID before...", "priority": "High", "severity": "high", "cvss": 7.6, "epss": 0.00324, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31607", "url": "https://patchblox.com/security/cve/CVE-2026-31607", "title": "usbip: validate number_of_packets in usbip_pack_ret_submit()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00311, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52920", "url": "https://patchblox.com/security/cve/CVE-2026-52920", "title": "netfilter: xt_policy: fix strict mode inbound policy matching", "priority": "High", "severity": "Moderate", "cvss": 8.3, "epss": 0.00299, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46099", "url": "https://patchblox.com/security/cve/CVE-2026-46099", "title": "net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00288, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31663", "url": "https://patchblox.com/security/cve/CVE-2026-31663", "title": "xfrm: hold dev ref until after transport_finish NF_HOOK", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00224, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46113", "url": "https://patchblox.com/security/cve/CVE-2026-46113", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52969", "url": "https://patchblox.com/security/cve/CVE-2026-52969", "title": "KVM: Reject wrapped offset in kvm_reset_dirty_gfn()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31588", "url": "https://patchblox.com/security/cve/CVE-2026-31588", "title": "KVM: x86: Use scratch field in MMIO fragment to hold small write values", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53369", "url": "https://patchblox.com/security/cve/CVE-2026-53369", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC lengt...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63860", "url": "https://patchblox.com/security/cve/CVE-2026-63860", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23272", "url": "https://patchblox.com/security/cve/CVE-2026-23272", "title": "netfilter: nf_tables: unconditionally bump set-\u003Enelems before insertion", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31407", "url": "https://patchblox.com/security/cve/CVE-2026-31407", "title": "netfilter: conntrack: add missing netlink policy validations", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53023", "url": "https://patchblox.com/security/cve/CVE-2026-53023", "title": "fs/ntfs3: terminate the cached volume label after UTF-8 conversion", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52912", "url": "https://patchblox.com/security/cve/CVE-2026-52912", "title": "netfilter: nf_queue: hold bridge skb-\u003Edev while queued", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64015", "url": "https://patchblox.com/security/cve/CVE-2026-64015", "title": "kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52933", "url": "https://patchblox.com/security/cve/CVE-2026-52933", "title": "io_uring/poll: fix signed comparison in io_poll_get_ownership()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46294", "url": "https://patchblox.com/security/cve/CVE-2026-46294", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00145, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52972", "url": "https://patchblox.com/security/cve/CVE-2026-52972", "title": "crypto: af_alg - Cap AEAD AD length to 0x80000000", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46149", "url": "https://patchblox.com/security/cve/CVE-2026-46149", "title": "scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46209", "url": "https://patchblox.com/security/cve/CVE-2026-46209", "title": "kernel-uek-core: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46062", "url": "https://patchblox.com/security/cve/CVE-2026-46062", "title": "ntfs3: fix integer overflow in run_unpack() volume boundary check", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53059", "url": "https://patchblox.com/security/cve/CVE-2026-53059", "title": "dm log: fix out-of-bounds write due to region_count overflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64153", "url": "https://patchblox.com/security/cve/CVE-2026-64153", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46129", "url": "https://patchblox.com/security/cve/CVE-2026-46129", "title": "btrfs: fix double free in create_space_info() error path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52962", "url": "https://patchblox.com/security/cve/CVE-2026-52962", "title": "ceph: fix a buffer leak in __ceph_setxattr()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46274", "url": "https://patchblox.com/security/cve/CVE-2026-46274", "title": "io-wq: check that the predecessor is hashed in io_wq_remove_pending()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64114", "url": "https://patchblox.com/security/cve/CVE-2026-64114", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45839", "url": "https://patchblox.com/security/cve/CVE-2026-45839", "title": "bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46033", "url": "https://patchblox.com/security/cve/CVE-2026-46033", "title": "crypto: authencesn - reject short ahash digests during instance creation", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64115", "url": "https://patchblox.com/security/cve/CVE-2026-64115", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46015", "url": "https://patchblox.com/security/cve/CVE-2026-46015", "title": "tcp: call sk_data_ready() after listener migration", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43093", "url": "https://patchblox.com/security/cve/CVE-2026-43093", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53033", "url": "https://patchblox.com/security/cve/CVE-2026-53033", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Take state lock for af_unix iter...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46132", "url": "https://patchblox.com/security/cve/CVE-2026-46132", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23442", "url": "https://patchblox.com/security/cve/CVE-2026-23442", "title": "ipv6: add NULL checks for idev in SRv6 paths", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46172", "url": "https://patchblox.com/security/cve/CVE-2026-46172", "title": "kernel-uek64k: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52970", "url": "https://patchblox.com/security/cve/CVE-2026-52970", "title": "netfilter: nft_ct: fix missing expect put in obj eval", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64032", "url": "https://patchblox.com/security/cve/CVE-2026-64032", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64073", "url": "https://patchblox.com/security/cve/CVE-2026-64073", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: irq_work: Fix use-after-free in irq_work_single(...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46023", "url": "https://patchblox.com/security/cve/CVE-2026-46023", "title": "dm mirror: fix integer overflow in create_dirty_log()", "priority": "High", "severity": "Low", "cvss": 7, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31586", "url": "https://patchblox.com/security/cve/CVE-2026-31586", "title": "mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46173", "url": "https://patchblox.com/security/cve/CVE-2026-46173", "title": "exit: prevent preemption of oopsing TASK_DEAD task", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46078", "url": "https://patchblox.com/security/cve/CVE-2026-46078", "title": "erofs: fix the out-of-bounds nameoff handling for trailing dirents", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45840", "url": "https://patchblox.com/security/cve/CVE-2026-45840", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31580", "url": "https://patchblox.com/security/cve/CVE-2026-31580", "title": "bcache: fix cached_dev.sb_bio use-after-free and crash", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46234", "url": "https://patchblox.com/security/cve/CVE-2026-46234", "title": "vsock: fix buffer size clamping order", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53011", "url": "https://patchblox.com/security/cve/CVE-2026-53011", "title": "net/sched: taprio: fix use-after-free in advance_sched() on schedule switch", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31673", "url": "https://patchblox.com/security/cve/CVE-2026-31673", "title": "af_unix: read UNIX_DIAG_VFS data under unix_state_lock", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46150", "url": "https://patchblox.com/security/cve/CVE-2026-46150", "title": "fanotify: fix false positive on permission events", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31419", "url": "https://patchblox.com/security/cve/CVE-2026-31419", "title": "net: bonding: fix use-after-free in bond_xmit_broadcast()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46053", "url": "https://patchblox.com/security/cve/CVE-2026-46053", "title": "net: rds: fix MR cleanup on copy error", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53004", "url": "https://patchblox.com/security/cve/CVE-2026-53004", "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64108", "url": "https://patchblox.com/security/cve/CVE-2026-64108", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix busy dentry used after unmounting Sin...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46120", "url": "https://patchblox.com/security/cve/CVE-2026-46120", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31716", "url": "https://patchblox.com/security/cve/CVE-2026-31716", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate rec-\u003Eused in journal-replay f...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46070", "url": "https://patchblox.com/security/cve/CVE-2026-46070", "title": "md/raid5: validate payload size before accessing journal metadata", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53063", "url": "https://patchblox.com/security/cve/CVE-2026-53063", "title": "dm cache: fix write hang in passthrough mode", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53034", "url": "https://patchblox.com/security/cve/CVE-2026-53034", "title": "bpf, sockmap: Fix af_unix null-ptr-deref in proto update", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63865", "url": "https://patchblox.com/security/cve/CVE-2026-63865", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52915", "url": "https://patchblox.com/security/cve/CVE-2026-52915", "title": "netfilter: ip6t_hbh: reject oversized option lists", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64121", "url": "https://patchblox.com/security/cve/CVE-2026-64121", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queue...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46072", "url": "https://patchblox.com/security/cve/CVE-2026-46072", "title": "ntfs3: add buffer boundary checks to run_unpack()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53064", "url": "https://patchblox.com/security/cve/CVE-2026-53064", "title": "dm cache: fix null-deref with concurrent writes in passthrough mode", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53021", "url": "https://patchblox.com/security/cve/CVE-2026-53021", "title": "scsi: target: core: Fix integer overflow in UNMAP bounds check", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31692", "url": "https://patchblox.com/security/cve/CVE-2026-31692", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nrtnetlink: add missing netlink_ns_capable() check...", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31684", "url": "https://patchblox.com/security/cve/CVE-2026-31684", "title": "net: sched: act_csum: validate nested VLAN headers", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64098", "url": "https://patchblox.com/security/cve/CVE-2026-64098", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00113, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31700", "url": "https://patchblox.com/security/cve/CVE-2026-31700", "title": "net/packet: fix TOCTOU race on mmap\u0027d vnet_hdr in tpacket_snd()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00111, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52975", "url": "https://patchblox.com/security/cve/CVE-2026-52975", "title": "bonding: 3ad: implement proper RCU rules for port-\u003Eaggregator", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46227", "url": "https://patchblox.com/security/cve/CVE-2026-46227", "title": "sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53050", "url": "https://patchblox.com/security/cve/CVE-2026-53050", "title": "quota: Fix race of dquot_scan_active() with quota deactivation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46107", "url": "https://patchblox.com/security/cve/CVE-2026-46107", "title": "dm-thin: fix metadata refcount underflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53096", "url": "https://patchblox.com/security/cve/CVE-2026-53096", "title": "bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43116", "url": "https://patchblox.com/security/cve/CVE-2026-43116", "title": "netfilter: ctnetlink: ensure safe access to master conntrack", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00101, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53989", "url": "https://patchblox.com/security/cve/CVE-2023-53989", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53047", "url": "https://patchblox.com/security/cve/CVE-2026-53047", "title": "efi/capsule-loader: fix incorrect sizeof in phys array reallocation", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53128", "url": "https://patchblox.com/security/cve/CVE-2026-53128", "title": "drbd: Balance RCU calls in drbd_adm_dump_devices()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46079", "url": "https://patchblox.com/security/cve/CVE-2026-46079", "title": "rbd: fix null-ptr-deref when device_add_disk() fails", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53012", "url": "https://patchblox.com/security/cve/CVE-2026-53012", "title": "nexthop: fix IPv6 route referencing IPv4 nexthop", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53295", "url": "https://patchblox.com/security/cve/CVE-2026-53295", "title": "mailbox: add sanity check for channel array", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23399", "url": "https://patchblox.com/security/cve/CVE-2026-23399", "title": "nf_tables: nft_dynset: fix possible stateful expression memleak in error path", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45841", "url": "https://patchblox.com/security/cve/CVE-2026-45841", "title": "netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43089", "url": "https://patchblox.com/security/cve/CVE-2026-43089", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() str...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46161", "url": "https://patchblox.com/security/cve/CVE-2026-46161", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46214", "url": "https://patchblox.com/security/cve/CVE-2026-46214", "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43085", "url": "https://patchblox.com/security/cve/CVE-2026-43085", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: initialize nfgenmsg in...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45838", "url": "https://patchblox.com/security/cve/CVE-2026-45838", "title": "bpf: fix end-of-list detection in cgroup_storage_get_next_key()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45842", "url": "https://patchblox.com/security/cve/CVE-2026-45842", "title": "slip: reject VJ receive packets on instances with no rstate array", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46040", "url": "https://patchblox.com/security/cve/CVE-2026-46040", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46046", "url": "https://patchblox.com/security/cve/CVE-2026-46046", "title": "ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46101", "url": "https://patchblox.com/security/cve/CVE-2026-46101", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53001", "url": "https://patchblox.com/security/cve/CVE-2026-53001", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46168", "url": "https://patchblox.com/security/cve/CVE-2026-46168", "title": "mptcp: fix scheduling with atomic in timestamp sockopt", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52984", "url": "https://patchblox.com/security/cve/CVE-2026-52984", "title": "kernel-uek-container: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53060", "url": "https://patchblox.com/security/cve/CVE-2026-53060", "title": "dm cache metadata: fix memory leak on metadata abort retry", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31590", "url": "https://patchblox.com/security/cve/CVE-2026-31590", "title": "KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31681", "url": "https://patchblox.com/security/cve/CVE-2026-31681", "title": "netfilter: xt_multiport: validate range encoding in checkentry", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43079", "url": "https://patchblox.com/security/cve/CVE-2026-43079", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Skip discovery table for...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43094", "url": "https://patchblox.com/security/cve/CVE-2026-43094", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ixgbevf: add missing negotiate_features op to Hy...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45987", "url": "https://patchblox.com/security/cve/CVE-2026-45987", "title": "KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45997", "url": "https://patchblox.com/security/cve/CVE-2026-45997", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing put_disk() when device_add...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46082", "url": "https://patchblox.com/security/cve/CVE-2026-46082", "title": "KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52977", "url": "https://patchblox.com/security/cve/CVE-2026-52977", "title": "futex: Prevent lockup in requeue-PI during signal/ timeout wakeup", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52985", "url": "https://patchblox.com/security/cve/CVE-2026-52985", "title": "kernel-uek-debug-devel: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52995", "url": "https://patchblox.com/security/cve/CVE-2026-52995", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/rds: zero per-item info buffer before handin...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53061", "url": "https://patchblox.com/security/cve/CVE-2026-53061", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix dirty mapping checking in passthro...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53287", "url": "https://patchblox.com/security/cve/CVE-2026-53287", "title": "audit: fix incorrect inheritable capability in CAPSET records", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64220", "url": "https://patchblox.com/security/cve/CVE-2026-64220", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode-\u003Esecondary to NULL i...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23255", "url": "https://patchblox.com/security/cve/CVE-2026-23255", "title": "net: add proper RCU protection to /proc/net/ptype", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43496", "url": "https://patchblox.com/security/cve/CVE-2026-43496", "title": "net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53111", "url": "https://patchblox.com/security/cve/CVE-2026-53111", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: test_run: Fix the null pointer dereference...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39961", "url": "https://patchblox.com/security/cve/CVE-2025-39961", "title": "iommu/amd/pgtbl: Fix possible race while increase page table level", "priority": "Routine", "severity": "Moderate", "cvss": 5.8, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53314", "url": "https://patchblox.com/security/cve/CVE-2026-53314", "title": "padata: Put CPU offline callback in ONLINE section to allow failure", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64185", "url": "https://patchblox.com/security/cve/CVE-2026-64185", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sysfs: don\u0027t remove existing directory on update...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53074", "url": "https://patchblox.com/security/cve/CVE-2026-53074", "title": "bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52921", "url": "https://patchblox.com/security/cve/CVE-2026-52921", "title": "netfilter: ipset: stop hash:* range iteration at end", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52925", "url": "https://patchblox.com/security/cve/CVE-2026-52925", "title": "vrf: Fix a potential NPD when removing a port from a VRF", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53304", "url": "https://patchblox.com/security/cve/CVE-2026-53304", "title": "scsi: sg: Resolve soft lockup issue when opening /dev/sgX", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00101, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46165", "url": "https://patchblox.com/security/cve/CVE-2026-46165", "title": "openvswitch: vport: fix self-deadlock on release of tunnel ports", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00099, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46051", "url": "https://patchblox.com/security/cve/CVE-2026-46051", "title": "md/raid5: fix soft lockup in retry_aligned_read()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46050", "url": "https://patchblox.com/security/cve/CVE-2026-46050", "title": "md/raid10: fix deadlock with check operation and nowait requests", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53035", "url": "https://patchblox.com/security/cve/CVE-2026-53035", "title": "bpf, sockmap: Fix af_unix iter deadlock", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53037", "url": "https://patchblox.com/security/cve/CVE-2026-53037", "title": "HID: usbhid: fix deadlock in hid_post_reset()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T13:56:55Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }